{"id":"CVE-2026-102917","title":"IBM i is Affected By An Improper Privilege Management Vulnerability","summary":"IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-269"],"vendor":"IBM","product":"i","affected":["i 7.6","i 7.5","i 7.4","i 7.3"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-17T03:55:59.264399Z"},"published":"2026-10-16","updated":"2026-10-20","sourceUpdated":"2026-10-20T13:05:49.605Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102917","references":[{"url":"https://www.ibm.com/support/pages/node/7292422"}],"tags":["cve.org"],"epss":0.00133,"epssPercentile":0.0279,"ingestedAt":"2026-10-16T19:46:24.440Z","slug":"CVE-2026-102917","body":"## Overview\n\nIBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.\n\n## Affected\n\n- `i 7.6`\n- `i 7.5`\n- `i 7.4`\n- `i 7.3`\n\n## Remediation\n\nIBM i Release5770-SS1 \nPTF Number(s)PTF Download Link(s)7.6SJ11832 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11832 7.5SJ11775 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11775 7.4SJ11833 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11833 7.3SJ11841 https://www.ibm.com/mysupport/s/fix-information?legacy=SJ11841 \n\n\n\nIBM recommends users running unsupported versions of affected products upgrade to a supported and fixed version of affected products.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}